Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e302e302f31372d3234203d3e203231353735.roa
File: 3133322e3235312e302e302f31372d3234203d3e203231353735.roa (raw, json)
Hash identifier: tunxor/ibIutpf1nswm5kPCxnEH9STaKTUjo0xHHHwI=
Subject key identifier: 5E:96:C9:15:54:62:5F:63:D5:21:27:AF:4F:0F:4B:53:DE:80:80:54
Certificate issuer: /CN=24D42265AC44C52C720364B7A5C0074DD2179046
Certificate serial: 2DE35494B9D61D6F466A4801DA1895EBF07BE030
Authority key identifier: 24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e302e302f31372d3234203d3e203231353735.roa
Signing time: Tue 04 Feb 2025 18:18:14 +0000
ROA not before: Tue 04 Feb 2025 18:13:14 +0000
ROA not after: Tue 03 Feb 2026 18:18:14 +0000
asID: 21575
IP address blocks: 132.251.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:e3:54:94:b9:d6:1d:6f:46:6a:48:01:da:18:95:eb:f0:7b:e0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24D42265AC44C52C720364B7A5C0074DD2179046
Validity
Not Before: Feb 4 18:13:14 2025 GMT
Not After : Feb 3 18:18:14 2026 GMT
Subject: CN=5E96C91554625F63D52127AF4F0F4B53DE808054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:cb:ef:84:c1:b2:df:45:70:12:08:2b:b5:
03:87:5f:84:42:88:0c:c9:1d:42:09:21:c5:33:c2:
26:4b:5d:09:01:c8:dc:19:0e:96:d9:9e:31:2b:94:
78:6f:8f:f5:4f:35:76:c5:c6:b0:56:66:41:35:68:
86:fa:90:8d:f4:18:50:da:85:d3:df:c8:1c:5a:32:
47:09:85:75:44:94:9f:d4:ce:72:02:dc:c1:69:ff:
ba:31:ca:c4:5a:90:50:10:2f:e1:9b:86:d3:28:d6:
a4:ec:ac:85:a6:2a:38:3a:35:0f:a4:b3:83:4a:a6:
96:1e:e0:96:81:03:6b:8c:13:33:96:62:2a:cc:a8:
d7:32:3c:ea:42:89:1c:c4:23:c4:f2:9b:1c:c7:8b:
7f:2d:78:59:b7:83:c2:2c:09:61:1b:5f:fc:e9:6c:
6c:f9:7d:36:7e:4c:62:d6:99:d5:a1:ca:1e:01:a2:
9c:58:76:57:7f:55:70:1e:b5:42:45:10:af:bb:b9:
2a:04:a1:59:1b:b7:b0:92:ff:33:38:b7:16:05:54:
50:85:8a:85:53:6f:0a:30:b2:f4:60:8b:45:f8:8a:
26:b8:ea:89:fe:8e:04:cc:9e:f4:38:45:4a:af:94:
02:05:0e:96:ec:98:df:06:e5:c6:21:af:4b:a3:d3:
7d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:96:C9:15:54:62:5F:63:D5:21:27:AF:4F:0F:4B:53:DE:80:80:54
X509v3 Authority Key Identifier:
keyid:24:D4:22:65:AC:44:C5:2C:72:03:64:B7:A5:C0:07:4D:D2:17:90:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/24D42265AC44C52C720364B7A5C0074DD2179046.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24D42265AC44C52C720364B7A5C0074DD2179046.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8971E1B8A26DCD7769C0260B5BE3A3ADD12865349977ADD2C68D52A527BB6682/0/3133322e3235312e302e302f31372d3234203d3e203231353735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.251.0.0/17
Signature Algorithm: sha256WithRSAEncryption
2b:01:8b:12:77:ab:7c:5a:fa:15:8e:38:7f:c9:b5:28:cb:e7:
13:80:ff:0f:b4:8e:4d:46:aa:bf:2d:7d:1f:df:c5:b6:73:45:
68:52:eb:26:d5:d0:54:f6:be:28:37:0a:28:d2:df:f7:b8:01:
f8:24:61:25:6b:c4:b5:bc:2a:de:c4:27:55:13:f0:9d:ee:2c:
39:73:9c:b2:47:39:d2:87:bc:20:68:5a:03:92:74:cc:b3:16:
bd:a0:14:f9:9c:16:49:f3:af:a6:fd:a3:8d:fe:5a:12:98:7f:
55:2c:e2:8d:73:32:81:c7:37:7a:85:e2:ba:7c:20:5c:ff:39:
1a:ca:cc:25:36:35:69:62:f9:76:41:0f:21:c5:4d:03:20:fd:
a5:3a:9f:91:6f:f9:c7:97:a1:4a:d8:e2:e1:b7:5c:59:ac:ee:
e2:39:70:c4:20:20:fe:8c:ac:9a:2b:e7:bf:bf:c1:67:58:d3:
fd:33:6d:cd:33:b9:45:29:b1:0c:57:f8:db:ed:4a:03:db:e2:
12:64:f8:7e:b9:57:73:30:dd:5c:60:67:a1:75:30:bc:c8:30:
b8:01:5f:5c:dd:59:59:ad:27:92:cb:c3:80:0f:59:f2:8c:0e:
d5:19:63:1d:0c:29:a7:ef:ee:12:06:f8:79:bf:6a:e7:ac:ea:
cb:31:fa:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:36 2025 by rpki-client